The increasingly notorious Lapsus€ cybercrime group has released a huge database allegedly containing sensitive Samsung information.
The leak, which contains 190 GB of data divided into three separate databases, was published via torrent.
Lapsus€ indicates that the databases contain the source code of each Trusted Applet (TA) installed in Samsung's TrustZone environment used for confidential operations; algorithms for all biometric unlocking operations; Bootloader source code for all recent Samsung devices; confidential Qualcomm source code; source code for Samsung activation servers; Full source code of the technology used to authorize and authenticate Samsung accounts, including APIs and services.
No confirmation, no ransom demand
The authenticity of the information has not been confirmed and Samsung has remained silent on the matter.
However, if these files turn out to be genuine, it would mean that the company suffered a breach of epic proportions, with potentially massive repercussions.
The torrent containing these files has already been downloaded by at least 400 peers, BleepingComputer reports, while Lapsus€ says it will implement more servers to increase download speeds.
Samsung was also asked to confirm whether the threat actor demanded a ransom in exchange for data privacy.
Lapsus€ has been quite active recently, claiming responsibility for a recent major attack on Nvidia, where it claims to have stolen a terabyte of sensitive data.
The data included the login credentials and other identity-related information of more than 70 Nvidia employees. Furthermore, the group claimed to have stolen information that helped them create a tool that removes the hash rate blocker on the company's latest GPU devices.
Nvidia has placed a limiter on its RTX 3000 GPU to deter Ethereum miners from gobbling up the entire supply. The tool was on sale for €1 million, but no one knows whether or not it works as expected, or if it's just another virus.